To enumerate subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. It also enumerates subdomains using OSINT (NetCraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS)

Installation

git clone <https://github.com/aboul3la/Sublist3r>
cd Sublist3r
pip3 install -r requirements.txt

Creating a simlink

ln -sf /opt/Sublist3r/sublist3r.py /usr/bin/sublist3r "

Switches

• d –domain Domain name to enumerate subdomains of
• b –bruteforce Enable the subbrute bruteforce module
• p –ports Scan the found subdomains against specific TCP ports
• t –threads Number of threads to use for subbrute bruteforce
• e –engines Specify a comma-separated list of search engines

Gonna search in all of the major search engines

sublist3r -v -d hackersploit.org -o -/Desktop/results.txt

sublist3r -d google.com -t 3 -e bing

Find in which subdomain port 80 is open in google.com

sublist3r -d google.com -p 80 -e bing